|
|
The auditlog command, when invoked with no options, will display the following auditing information:
# auditlog
Current Status of Auditing: ON
Current Event Log: /var/audit/0415477
Current Audit Buffer High Water Mark: 20480 bytes
Current Maximum File Size Setting: 1000 blocks
Action To Be Taken Upon Full Event Log: log switch
Action To Be Taken Upon Error: disable
Next Event Log To Be Used: /var/audit/MMDD###
Program To Be Run When Event Log Is Full: /etc/security/audit/alog.sh
The first line of the output reports the status of auditing;
it will be either
ON
or
OFF.
If auditing is on, the rest of the display reports the current
audit settings.
If auditing is off, the display reports
the settings that will take effect when auditing is enabled next.